infrastructure/ansible/roles/gateway/files/haproxy-fail2ban-jail.conf

[haproxy]
enabled  = true
bantime  = 600
findtime = 60
maxretry = 15
filter   = haproxy-basic
backend  = systemd
journalmatch = _COMM=haproxy
port     = http,https
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`[haproxy]`
			`enabled = true`
			`bantime = 600`
Decrease find time Hopefully reduce false-positive catches 2021-02-14 11:22:32 +00:00			`findtime = 60`
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`maxretry = 15`
			`filter = haproxy-basic`
Update haproxy fail2ban jail to use systemd for logs 2020-10-16 19:15:38 +01:00			`backend = systemd`
			`journalmatch = _COMM=haproxy`
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`port = http,https`
Exclude nebula from fail2ban 2021-02-14 11:39:01 +00:00			`ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }}`